On my relatively freshly installed hardened system I try to get Skype 4.0.0.8 to run with the following profile. Unfortunately, USE=pax_kernel leads to an abort of the merge, without it the merge finishes but PaXmarking the binary fails with

(This is actually the stuff done with USE=pax_kernel). Has anybody succeeded in getting it to run? Somewhere I read some hints about placing PaXmarkings in ACL and not the binary header, which should solve part of the problem.